Brett

It turned out to be Norton Security causing the problem with IE. Upon uninstalling/reinstalling Norton, IE is now working correctly.

Just out of curiosity, I just recently restarted my PC in safe mode with networking. IE worked correctly while in safe mode.

Hello, I've been having some trouble with IE 11 on my Win7 64bit PC for about a week now. When I try to open IE after starting/restarting my PC, the browser window opens, but it's just an incomplete blank page. I can see the address bar and page tab, but both are blank. The home, favorites, and settings cog icons are visible. I can click on the settings cog and favorites icons, which will open their respective drop down menus, but that's about it. Looking at the processes tab in task manager while the blank/incomplete IE page is up, I have (1) iexplore.exe and (1) iexplore.exe *32 running. If I try to open at least (2) more page tabs on the currently open IE browser (ctrl +T) or open at least (2) more IE windows (right-clicking on IE icon on task bar and clicking "internet explorer"), the third and all tabs/windows thereafter will load IE correctly (my only home page, google, comes up and Norton Toolbar loads. I noticed that, upon a successful load of IE, a 2nd iexplore.exe *32 appears in the processes tab in task manager. If I close the IE browser(s), the (1) iexplore.exe and (2) iexplore.exe *32s remain in the processes tab in task manager. I can open IE successfully (new windows and new tabs) every time while the (1) iexplore.exe and (2) iexplore.exe *32s are present in the in the processes tab in task manager. If I "end process" the iexplore.exe, all IE processes will close. However, the next time I try to open IE, the issue starts up again. The issue occurs even when I try opening IE without add-ons (Internet Explorer No-Add Ons). I ran run system file checker to see if it would help. Upon completion, the cmd prompt stated that there were issues that couldn't be repaired. However, looking at the CBS log file (extracting the [SR] tags to an sfcdetails.txt), all of the "SR" tags looked good. They all listed "beginning verify and repair transaction - verify complete" or something similar to that effect. I attempted to fix the issue by uninstalling IE 11, which took me back to IE 8. Windows update came up nearly right away after restarting the PC. IE 10 was provided as an update, which installed successfully. While having IE 10, the above issue didn't exist. IE loaded correctly every time and, upon closing the browser, all instances of iexplore.exe in the processes tab in task manager shut down. I then proceeded to try to update to IE 11. After so-called "successfully" installing IE 11, checking the "about internet explorer" under the HELP menu dropdown, it showed I was still using IE 10. After many, many attempts to reinstall IE 11, using various strategies, I managed to get it to reinstall correctly. Unfortunately, the original issue was back right away. I don't know what to do next. I've spent many hours attempting to try to fix this on my own, without any true success. I'm hoping that this is an easy fix...

Thank you for your help Ron. I'm taking it that MBAM did its job by blocking the incoming probes. However, I greatly appreciate you taking the time to guide me in making sure my computer wasn't infected, as well as tidying things up. Also, it looks like your suggestions for the Volume Shadow Copy errors have worked, as I have yet to see any additional errors in the event viewer since making the changes. Thanks again, Brett

Nope, it seems the issues have been taken care of. Is there anything special I need to do to remove the various scanners I've downloaded/installed?

Hello Ron, Attached is the fixlog.txt I've followed your advice by removing the iOBits Uninstaller program. I was unaware of their shady actions. Regarding the VSS errors, I went through all of the suggestions you provided. I implemented the suggestion provided here: https://www.terabyteunlimited.com/kb/article.php?id=563. I also changed the Volume Shadow Copy service's startup type from manual to automatic as one suggestion stated to start the service if it was off. I found it to be off, so I started it manually. However, after a reboot, it was back off again. Since changing it to automatic start, it starts automatically after a reboot. Is setting it to automatic startup recommended? I looked into the, the Acronis suggestion, but it unfortunately didn't apply. My Locale setting was already set to "English (United States)". I'll keep an eye on the event viewer to see if I continue to receive VSS errors. If errors continue, I'll then try reinstalling Norton Ghost 15. Thanks again for the continued assistance! Fixlog.txt

Hello Ron, The ESET online scanner was again unresponsive upon completion. Like before, its window was all white except for the minimize and close buttons in the top right corner. I had to close the window via task manager. On a positive note, I was able to find the scan's log file in C:\Users\Brett\AppData\Local\Temp, which I've attached. I see it lists (3) files as potential threats. They're associated with an mp3 file splitter program that I haven't used in a long time, so I've uninstalled it. Also attached are the FRST and Addition log files. Thankfully, its scan finished without any trouble. Let me know if you need anything else. Thank You, Brett FRST 061216 2228.txt Addition 061216 2229.txt ESET log 061216 2205.txt

Hello Ron, I'm finally back home and back to my computer. It looks like the ESET online scanner froze up in my absence. Its window was still up on my screen, but was blank and unresponsive. I searched for its log file on my computer, but couldn't find the manufacturer's referenced ESET folder under program files (x86). As such, I had to restart my computer and begin a new scan. The new scan window states that the last scan took just over 4.5 hours to complete, so it seems the previous scan was successful. I'll post new scan's results once it has finished. As promised, I've attached the AdwCleaner clean log file for your review. AdwCleaner[C2] 060316 1254.txt

That's great news! Sorry about the wrong adwcleaner log. I did have it remove the items it found. They're currently in the quarantine folder. I'll send the clean log too when I get back. As for the IP blocks, they stopped on 6/1 in the late afternoon after occurring for about 17 hrs every 3-5 minutes. They were all inbound blocks except for 2 outbound blocks that occurred about the same time the inbound started. All blocks were from the same IP address. I did see that the ESET scan had found 3 threats. However, since it was still in progress, I couldn't see what they were. I allowed it to continue to run, but I re-enabled my Norton's auto-protect as well as MBAM before I left. So, the scan may not be accurate. I look forward to continuing the search when I return. Talk to you then. Best regards ---------- Brett

Hello Ron, Please find attached the requested JRT and AdwCleaner scan logs. The ESET scan is still running after 2 hours and just under halfway complete (per the scan progress bar). The current scan result states that no threats have been found thus far. Unfortunately, I'm leaving for vacation around 5 pm EDT today and won't be returning until next Saturday (6/11). I won't be able to continue with the scans until I return. If the ESET scan should finish before it's time for me to leave, I'll be sure to send it to you, as well as the FRST scan (the FRST scan takes only a minute or so to complete). Otherwise, with your permission, I'll send you the completed scans upon my return. Out of curiosity, do my recent logs seem to indicate that any malicious activity is present on my PC? I'll have my phone with me, so I'll be able to check my email for your reply. Thank you for your continued assistance! -------------- Brett JRT 060316 1230.txt AdwCleaner[S3] 060316 1253.txt

Hello AdvancedSetup, Thank you for taking the time to help me out. The requested scans are attached. Rkill 060316 0146.txt mbam scan 060316 0153.txt

Update - it seems the malicious website blocking notifications have stopped. The last instance of it in my MBAM protection log shows 3:53 pm EDT, 6/1. They had been popping up every 3 to 5 minutes starting from 12:15 am EDT, 6/1. I did run adwcleaner around 1 pm, using its default settings. It found (1) file & (7) registry keys, which are currently quarantined, but it had no obvious effect on the malicious website blocking notifications. Since nothing was done on my end to make them cease, I'm curious if they've actually stopped or if MBAM is just no longer seeing the inbound attacks.

Hello, It seems my PC may be infected by something. I'm getting repeated notifications that a malicious website has been blocked. They occur roughly every 3 minutes, twice, back to back, always from the same IP address --- 146.185.239.95. They're occurring without internet explorer being open. I've attached my frst & addition txt files as well as the mbam protection & scan txt files. Unfortunately, I ran temporary file cleaners prior to visiting the mbam support site, my mistake. I appreciate any assistance that can be given. FRST.txt Addition.txt mbam protection log.txt mbam scan log.txt